Privacy Policy

PRIVACY POLICY

www.maquistador.com

ARTICLE 1 PREAMBLE

This privacy policy applies to the website www.maquistador.com

The purpose of this privacy policy is to explain to users of the website www.maquistador.com how their personal data is collected and processed. Personal data should be considered to be any data that can identify a user. This includes the user's first and last name, age, postal address, email address, location or telephone number.

What are users' rights regarding this data?

Who is responsible for the processing of personal data collected and processed?

Who is this data transmitted to?

Possibly, the site's policy on "cookies" files.

This privacy policy supplements the legal notices and the General Conditions of Use that users can consult at the following address:

https://maquistador.com/policies/terms-of-sale

ARTICLE 2 GENERAL PRINCIPLES REGARDING DATA COLLECTION AND PROCESSING.

In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of data from users of the site respects the following principles:  :

Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user will be informed that their data is being collected, and for what reasons their data is being collected.

Limited purposes: the collection and processing of data is carried out to meet one or more objectives determined in these general conditions of use.

Minimization of data collection and processing: only data necessary for the proper execution of the objectives pursued by the site are collected.

Data retention reduced over time: data is retained for a limited period, of which the user is informed. When this information cannot be communicated, the user is informed of the criteria used to determine the retention period.

Integrity and confidentiality of data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.

In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they comply with at least one of the conditions listed below.

The user has expressly consented to the processing.

The processing is necessary for the proper performance of a contract. The processing is based on a legal obligation. The processing is necessary to protect the vital interests of the data subject or of another natural person. The processing may be necessary for the performance of a task carried out in the public interest or in the exercise of official authority. The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the controller or by a third party.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING BROWSING ON THE SITE.

DATA COLLECTED AND PROCESSED AND METHOD OF COLLECTION.

The personal data collected on the Maquistador.com website are as follows (this data is collected when the user performs one of the following operations on the website):

When the user buys a product, he must provide his name, first name, email, postal address and telephone number. When the user uses the contact form, he must provide his name, first name, email and telephone number. When the user creates a customer account, he must provide his name, first name and email.

Furthermore, when making a payment on the site, proof of the transaction including the order form and the invoice will be kept in the site publisher's computer systems.

The data controller will keep all data collected in its site's computer systems and under reasonable security conditions for a period of: - accounting data: 10 years

- customer account: 2 years

• contractual, commercial documents: 3 years

The collection and processing of data meets the following purposes:

• process orders, ship packages
• respond to requests sent through the contact form

The user has expressly consented to the processing;<br>- The processing is necessary for the proper performance of a contract.

TRANSMISSION OF DATA TO THIRD PARTIES

The personal data collected by the site are not transmitted to any third party, and are only processed by the publisher of the site.

DATA HOSTING

The maquistador.com website is hosted by the company OVH.

ARTICLE 4: DATA PROCESSING MANAGER

THE DATA CONTROLLER

The person responsible for processing personal data can be contacted as follows: by email at contact@maquistador.com

The data controller is responsible for determining the purposes and means used for processing personal data.

OBLIGATIONS OF THE DATA CONTROLLER

The data controller undertakes to protect the personal data collected, not to transmit them to third parties without the user having been informed and to respect the purposes for which these data were collected.

The site has an SSL certificate to ensure that information and data transfer passing through the site are secure.

An SSL certificate ("Secure Socket Layer" Certificate) is intended to secure the data exchanged between the user and the site.

Furthermore, the data controller undertakes to notify the user in the event of rectification or deletion of data, unless this entails disproportionate formalities, costs and procedures for the user.

In the event that the integrity, confidentiality or security of the user's personal data is compromised, the data controller undertakes to inform the user by any means.

ARTICLE 5: USER RIGHTS

In accordance with the regulations concerning the processing of personal data, the user has the rights listed below.

In order for the data controller to comply with his/her request, the user is required to provide him/her with: his/her first and last name as well as his/her email address, and if relevant, his/her account number or personal or subscriber space number.

The data controller is required to respond to the user within a maximum of 30 (thirty) days.

PRESENTATION OF USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING

1. Right of access, rectification and right to erasure

The user may view, update, modify or request the deletion of data concerning him/her, by following the procedure set out below.

the user must request the site in order to:

• that the publisher of the site brings to his attention the personal data which it has concerning him.
• updating your personal data
• the modification of his personal data
• the deletion of his personal data.

If he has one, the user has the right to request the deletion of his personal space by following the following procedure:

The user must send an email to contact@maquistador.com and their request will be processed within 3 days maximum.

b. Right to data portability.

The user has the right to request the portability of his personal data, held by the site, to another site, by complying with the following procedure:

the user in order to make a request for portability of his personal data must send an email to the following address: contact@maquistador.com

c. Right to limitation and opposition to data processing

The user has the right to request the limitation or to oppose the processing of his data by the site, without the site being able to refuse, except to demonstrate the existence of legitimate and compelling reasons, which may prevail over the interests and the rights and freedoms of the user.

In order to request the limitation of the processing of his/her data or to object to the processing of his/her data, the user must follow the following procedure.

the user in order to make a request to limit the processing of his data or to make a request to oppose their processing, must send an email to the following address: contact@maquistador.com

d. Right not to be subject to a decision based exclusively on an automated process

In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based exclusively on an automated process if the decision produces legal effects concerning him or her, or significantly affects him or her in a similar manner.

e. Right to determine the fate of data after death

The user is reminded that he can organize what should happen to his collected and processed data if he dies, in accordance with law n°2016-1321 of October 7, 2016.

f. Right to refer the matter to the competent supervisory authority

In the event that the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or if he believes that one of the rights listed above has been infringed, he is entitled to refer the matter to the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or any competent judge.

PERSONAL DATA OF MINORS

In accordance with the provisions of Article 8 of European Regulation 2016/679 and the Data Protection Act, only minors aged 15 or over may consent to the processing of their personal data.

If the user is a minor under 15 years of age, the consent of a legal representative will be required so that personal data can be collected and processed.

The publisher of the site reserves the right to verify by any means that the user is over 15 years old, or that he has obtained the agreement of a legal representative before browsing the site.

ARTICLE 6: USE OF COOKIE FILES

A "cookie" is a small file (less than 4 KB), stored by the site on the user's hard drive, containing information relating to the user's browsing habits.

These files allow it to process statistics and traffic information, facilitate navigation and improve the service for the user's comfort.

For the use of "cookie" files involving the saving and analysis of personal data, the user's consent is necessarily requested.

This user consent is considered valid for a maximum period of 6 (six) months. At the end of this period, the site will again ask the user for permission to save "cookie" files on their hard drive.

1. User opposition to the use of "cookies" files by the site

Cookies that are not essential to the operation of the site are only placed on the user's terminal after obtaining their consent. The user can withdraw their consent at any time, as follows:

The user can click on the "no thanks" button at the bottom of the page to withdraw his consent for the use of cookies.

More generally, the user is informed that he or she can oppose the recording of these "cookie" files by configuring his or her browser software.

For information, the user can find at the following addresses the steps to follow in order to configure their browser software to oppose the recording of cookie files.

https://support.google.com/accounts/answer/61416?hl=en

https://support.mozilla.org/fr/kb/enable-and-disable-cookies-website-preferences

http://www.apple.com/legal/privacy/fr-ww/

https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies

http://www.opera.com/help/tutorials/security/cookies/

In the event that the user decides to disable the "cookies" files, he/she will be able to continue browsing the site. However, any malfunction of the site caused by this manipulation could not be considered as being due to the publisher of the site.

b. Description of the “cookies” files used by the site

The publisher of the site draws the user's attention to the fact that the following cookies are used during navigation:

_secure_session_id  Use related to browsing an online store.

_shopify_country Payment related usage.

_shopify_m Usage related to managing customer privacy settings.

_shopify_tm Use related to managing customer privacy settings.

_shopify_tw Use related to managing customer privacy settings.

_storefront_u Use related to updating customer account information.

_tracking_consent Tracking preferences.

cart_currency Usage related to shopping cart.

cart_sig Payment related usage.

cart_ts Payment related usage.

cart_ver Usage related to shopping cart.

checkout_token Payment related usage.

dynamic_checkout_shown_on_cart Payment related usage.

hide_shopify_pay_for_checkout Payment related usage.

keep_alive Usage related to buyer location.

master_device_id Usage related to merchant identifiers.

previous_step Payment related usage.

remember_me Payment related usage.

secure_customer_sig Usage related to customer identifiers.

shopify_pay Payment related usage.

shopify_pay_redirect Payment related usage.

storefront_digest Usage related to customer identifiers.

tracked_start_checkout Payment related usage.

_landing_page Landing page tracking.

_orig_referrer Landing page tracking.

_s Data analytics provided by Shopify.

_shopify_d Data analytics provided by Shopify.

_shopify_s Data analytics provided by Shopify.

_shopify_sa_p Data analytics provided by Shopify related to marketing and referrals.

_shopify_sa_t Data analytics provided by Shopify related to marketing and referrals.

_shopify_y Data analytics provided by Shopify. <br>_y Data analytics provided by Shopify.

_shopify_evids Shopify Data Analytics

ARTICLE 7: CONDITIONS FOR MODIFICATION OF THE PRIVACY POLICY

This privacy policy can be consulted at any time at the address indicated below.

www.maquistador.com/pages/privacy-policy

The publisher of the site reserves the right to modify it in order to guarantee its compliance with current law.

Therefore, the user is invited to regularly consult this confidentiality policy in order to keep informed of the latest changes that will be made to it.

However, in the event of a substantial modification to this policy, the user will be informed in the following manner:

By push notification when the user visits the maquistador website.